Indeed, but courts in France have the habit of always firing warning shots. Non-compliance can trigger another court decision with forceful consequences.

So far GDPR has only yielded symbolic amounts. But the legislative cap is at profit-destroying levels.